SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Opendoor is building the modern system of homeownership, enabling people to buy and sell homes on their own terms through an end-to-end online experience.
The Security Engineering team builds intelligent systems that protect Opendoor and its customers while enabling engineering velocity. This role owns the identity control plane end-to-end—designing and building the platform that authenticates and authorizes every employee and contractor.
Key responsibilities include:
• Own the identity control plane end-to-end: design, build, and operate systems that authenticate and authorize all employees and contractors.
• Implement passwordless authentication (e.g., passkeys) for the workforce across employee and contractor identities.
• Define enrollment rules for authentication methods by population, setting assurance bars before users reach session or app-level policy.
• Design authenticator assurance tiers and tune session policy (session lifetime, idle timeout, step-up re-authentication) scaled to access risk.
• Build per-application authentication policies that weigh device posture, network context, and risk signals to determine when phishing-resistant factors or fresh re-authentication are required.
• Own the non-human identity inventory: service accounts, API keys, and workload identities, each tracked with short-lived, federated credentials and automatic expiry.
• Treat AI agents as their own identity class with scoped, single-use credentials per action and granular audit trails.
• Manage identity configuration as code, shipping changes through pull requests for easy reversibility.
• Build first-party tooling extending commercial identity platforms: lifecycle automation, access governance, provisioning, and custom integrations.
• Own technical direction for identity and contribute to the broader security engineering roadmap.
• Feed high-fidelity identity telemetry and auth events into detection and response pipelines; support incident response.
• Establish secure-by-default standards for new SaaS and AI tools at the identity layer.
• Mentor engineers across security and IT on identity engineering patterns and build automation others can build on.
Requirements:
• Deep conviction that AI and automation should eliminate manual work, with proven track record building agentic systems.
• Designed, built, and operated a workforce identity platform at enterprise scale with deep hands-on Okta engineering expertise: building automation and API-driven integrations.
• Shipped a passkey rollout on Okta at enterprise scale; knows where WebAuthn and FIDO2 adoption breaks in the real world and how to fix it.
• Manages identity infrastructure as code: writes and reviews Terraform or equivalent IaC tools for identity systems; ships changes through pull requests.
• Strong software engineering ability in Python, Go, or TypeScript, building first-party tooling and API-driven automation on top of identity platforms.
• Identity-first mindset: SSO, SAML, OIDC, SCIM provisioning, conditional access, and least privilege applied at scale across employees and contractors.
• High autonomy; sets roadmap and path forward in ambiguous territory and personally executes.
• Business-enablement mindset; success measured by adoption and impact.
• Humility and curiosity; builds guardrails and automation that make it easier for other teams to move fast securely.
Nice to have:
• Hands-on Google Workspace administration and automation (Admin SDK, directory sync, DLP) alongside Okta.
• Experience tying device trust or posture signals to access decisions; identity-aware proxy patterns.
• SOC 2 or SOX access-control evidence experience.
• Contributions to open source identity tooling or the Okta Terraform provider ecosystem.
Tech stack: Okta, Okta Workflows, Google Workspace, Terraform, Python, Go, TypeScript, GitHub, WebAuthn, FIDO2, SAML, OIDC, SCIM, Datadog, AI tooling (OpenAI, Anthropic).
